Auto Craft
Engineering UK Ltd are committed to complying with the General Data
Protection Regulation and the Data Protection Act 2018. Looking after
the personal information you share with us is very important, and we
want you to be confident that your personal data is kept safely and
securely and to understand how we use it to offer you a better and
more personalised shopping experience.

We have
published this notice to help you understand

how and
why Auto Craft collect information from you;

who we
share your information with, why and on what basis

what your
rights are.

If we make
changes to this notice we will notify you by updating it on our
website. Auto Craft will be what is known as the ‘Data Controller’
of the personal data you provide to us. This means Auto Craft
determines the purposes and way in which any personal data is, or
will be, processed.

When you
buy parts from us, you are entering into a contract with us. You will
need to set up an Auto Craft Account before ordering from us, so we
can set this up we will ask you to provide some personal information
such as;

full name

address

contact
numbers

email
address

As an
existing customer if you have shopped with us using a credit or debit
card, or we have taken these details for a payment authorisation, we
will securely collect and store this payment card information. New
customers and existing customers whose payment cards have expired
will be asked if they would like to automatically store these details
in order to speed up the payment process.

How do we
use your information?

Data
Protection says that we are allowed to use and share your personal
data only where we have a proper reason to do so. The law says we
must have one or more of these reasons and these are:

Contract -
your personal information is processed in order to fulfil a
contractual arrangement e.g. in order to send you your order

Consent –
where you agree to us using your information in this way e.g. for
storing your payment card details.

Legitimate
Interests - this means the interests of Auto Craft in managing our
business to allow us to provide you with the best products and
service in the most secure and appropriate way e.g. to transfer your
data to certain Third Party’s such as delivery partners.

Legal
Obligation – where there is statutory or other legal requirement
to share the information e.g. when we have to share your information
for law enforcement purposes.

Here is a
list of the ways that we may use your personal information, and which
of the reasons described above we rely on to do so. Where we list
legitimate interests as a reason, we also describe below what we
believe these legitimate interests are.

What
we use your personal information for

Our
reasons (legal basis)

Our
explanation of Auto Crafts legitimate Interests

Set
up your Auto Craft Account

• Legitimate interest

Process
efficiency in dealing with such activity.

Storing
payment cards

• Consent

N/A

Process
your orders

• Fulfilling a contract

N/A

Notify
you of your order status

• Legitimate interests

Process
efficiency in dealing with such activity, and to make improvements to
our services.

Keeping
our records up to date, handling our customer contact efficiently and
effectively, working out which of our products and services may
interest you and telling you about them.

To
detect, investigate and report financial crime (e.g. Fraud)

• Legal Obligation / legitimate
interests

Developing
and improving how we deal with financial crime. Complying with any
legal obligation placed on us by regulators such as the FCA.
Complying with any regulations that apply to us. Process efficiency
in dealing with such activity, and to make service and process
improvements.

Undertake
website personalisation and administration.

• Legitimate interests

Developing
products, services, applications and designs that attract and retain
customers. Improving customer interaction with our sites. Defining
types of customers for new products or services

Marketing
communications to inform you of special offers, promotions, new
products. Provide you with online advertising

We
use information about shopping habits, products bought and volumes,
to help us to respond to demand, ensure the right products get to the
right areas and to help us plan our ranges.

Who we
share your information with and why

Auto
Craft works with a number of trusted suppliers and businesses in
order to provide you with the high quality parts and services you
expect from us such as delivery companies. Some examples of the
categories of third parties with whom we share your data
are:

Supplier
Partners

Auto Craft works with a number of trusted partners who supply
products and services on our behalf. All partners are subject to
security checks, and will only hold the minimum amount of personal
information needed in order to fulfil the orders you place or provide
a service on our behalf.

Delivery
Partners

In
order for you to receive your parts, Auto Craft works with a number
of delivery partners. Again, we only pass limited information to them
in order to ensure delivery of your items.

IT
Companies

Auto
Craft works with businesses who support our website and other
business systems..

Payment
processing

Auto
Craft works with trusted third party payment processing providers in
order to securely take and manage payments.

Debt
recovery and fraud prevention services

Before
we provide products to you, we undertake checks for the purposes of
preventing fraud and money laundering, and to verify your identity.
These checks require us to process personal data about you.

The
personal data you have provided, we have collected from you, or we
have received from third parties will be used to prevent fraud and
money laundering, and to verify your identity.

We and fraud prevention agencies may also enable law
enforcement agencies to access and use your personal data to detect,
investigate and prevent crime.

We process your personal data
on the basis that we have a legitimate interest in preventing fraud
and money laundering, and to verify identity, in order to protect our
business and to comply with laws that apply to us. Such processing is
also a contractual requirement of the services you have
requested.

We process your personal data on the basis that it
is necessary in the public interest or in exercising official
authority for us to prevent fraud and money laundering, and to verify
identity, in order to protect ourselves and to comply with laws that
apply to us.

Fraud prevention agencies can hold your personal
data for different periods of time, and if you are considered to pose
a fraud or money laundering risk, your data can be held for up to six
years.

Automated Decisions

As part of the processing of
your personal data, decisions may be made by automated means. This
means we may automatically decide that you pose a fraud or money
laundering risk if our processing reveals your behaviour to be
consistent with money laundering or known fraudulent conduct, or is
inconsistent with your previous submissions, or you appear to have
deliberately hidden your true identity. You have rights in relation
to automated decision-making: if you want to know more please contact
us using the details above.

Consequences of Processing

If
we, or a fraud prevention agency, determine that you pose a fraud or
money laundering risk, we may refuse to provide the services you have
requested, or we may stop providing existing services to you.

A
record of any fraud or money laundering risk will be retained by the
fraud prevention agencies, and may result in others refusing to
provide services to you. If you have any questions about this, please
contact us on the details above.

Data Transfers

Whenever
fraud prevention agencies transfer your personal data outside of the
European Economic Area, they impose contractual obligations on the
recipients of that data to protect your personal data to the standard
required in the European Economic Area. They may also require the
recipient to subscribe to ‘international frameworks’ intended to
enable secure data sharing.

Your Rights

Your personal
data is protected by legal rights, which include your rights to
object to our processing of your personal data; request that your
personal data is erased or corrected; request access to your personal
data.

For more information or to exercise your data
protection rights, please contact us using the contact details above.
You also have a right to complain to the Information Commissioner’s
Office, which regulates the processing of personal data.

Keeping
in touch with you

We
want to keep you up to date with information about new products,
special offers and improvements to our website. When you set your
account up, we will ask you if you want to receive this type of
marketing information.

Auto Craft will not share your
information with other companies for their marketing purposes.

If
you decide you do not want to receive this marketing information you
can request that we stop by writing to Auto Craft at the address
above or emailing us as customercare@autocrafteng.co.uk,
or by calling us on 02476 398217.

You may continue to receive
mailings for a short period while your request is dealt with.

How long
we keep your information

If we
collect your personal information, the length of time we retain it is
determined by a number of factors including the purpose for which we
use that information and our obligations under other laws.

We may need
your personal information to establish, bring or defend legal claims.
For this purpose, we will always retain your personal information for
7 years after the date it is no longer needed by us for any of the
purposes listed under How we use your information above. The only
exceptions to this are where:

the law
requires us to hold your personal information for a longer period,
or delete it sooner;

you
exercise your right to have the information erased (where it
applies) and we do not need to hold it in connection with any of the
reasons permitted or required under the law;

we bring
or defend a legal claim or other proceedings during the period we
retain your personal information, in which case we will retain your
personal information until those proceedings have concluded and no
further appeals are possible; or

in limited
cases, existing or future law or a court or regulator requires us to
keep your personal information for a longer or shorter period.

What are
your rights

You
are entitled to request the following from Auto Craft, these are
called your Data Subject Rights and there is more information on
these on the Information Commissioners website www.ico.org.uk

Right of
access –to request access to your personal information and
information about how we process it

Right to
rectification –to have your personal information corrected if it
is inaccurate and to have incomplete personal information completed

Right to
erasure (also known as the Right to be Forgotten) – to have your
personal information erased.

Right to
restriction of processing – to restrict processing of your
personal information

Right to
data portability - to electronically move, copy or transfer your
personal information in a standard form

Right to
object - to object to processing of your personal information

If
you have any general questions about your rights or want to exercise
your rights please email us at customercare@autocrafteng.co.uk

You
have the right to lodge a complaint with a data protection regulator
in Europe, in particular in a country you work or live or where your
legal rights have been infringed. The contact details for the
Information Commissioner’s Office (ICO), the data protection
regulator in the UK, are available on the ICO website www.ico.org.uk where your personal information has or is being used in a way that
you believe does not comply with data, however, we encourage you to
contact us before making any complaint and we will seek to resolve
any issues or concerns you may have.

Cookie
Notice

This
notice is designed to help you understand what cookies are, how Auto
Craft uses them and the choices you have in regards to their use.

By
continuing to use www.autocrafteng.co.uk the “Site”, you are agreeing to our use of cookies in the manner
described in this notice.

What are
cookies?

Cookies
are small text files that are stored on your browser or the hard
drive of your computer or other device when you visit the Site. This
allows the Site to recognise you as a user either for the duration of
your visit (using a ‘session cookie’) or for repeat visits ( a
‘persistent cookie’). They are not harmful and do not contain any
information such as your home address, date of birth or credit card
details.

The cookies we use fall into four broad
types:

Strictly
Necessary Cookies

These
cookies are essential in helping you to move around our Site and use
its features, such as accessing secure areas of the website. Without
these cookies, services you have asked for, such as setting up an
account cannot be provided. These cookies do not gather information
about you that could be used for marketing or remembering where
you've been on the internet.

Analytical/Performance
Cookies

In
order to keep the Site, its services and products relevant, easy to
use and up-to-date, we use web analytics services to help us
understand how people use our Site. For example, we can see which
parts of the Site and products are most popular, identify when errors
occur, and test different versions of a page or feature to see which
one works best.

Functionality
Cookies

These
cookies allow websites and applications to remember choices you make
(such as your user name, language or the region you are in) and
provide enhanced, more personal features. The information these
cookies collect is usually anonymised which means we can't identify
you personally. They do not gather any information about you that
could be used for selling advertising or remembering where you've
been on the internet, but do help us to serve you with advertising
that is more relevant to you.

Targeted
Marketing Cookies

We
also use cookies to assist in targeted advertising. Without these
cookies, online advertisements you encounter will be less relevant to
you and your interests.

What do we
use Cookies for?

They
enable you to transact, whilst other non-essential cookies enable us
to give you an enhanced, personalised web experience and determine
relevant products to show you.

To
personalise and improve your customer experience.

To allow
you to securely sign in to your Auto Craft Account, so that you can
use "My Account" features

To
recognise the device that you are using.

To store
the content of your online shopping bag whilst you browse the site
and to complete an order.

To record
the areas of the Site that you have visited, products you have
viewed and time spent browsing, as well as the products you
purchased. Auto Craft uses this information to help make the website
more user friendly, develop our Site design and to continuously
improve the quality of the service we provide.

To
distribute visitors to our Site evenly across platforms to ensure
the content is served at the fastest possible speed.

We also
offer you the facility to share your experience on our Site through
social media sites such as Facebook and Twitter. By using these
features, you are consenting to allow cookies from these providers.
More information about how these providers use cookies can be found
at their websites.

Are
cookies safe?

Yes.
The information stored in cookies is safe and anonymous to any
external third party, and your account security is never compromised.

Can I turn
off cookies?

Yes – but
if you choose not to allow the use of cookies, your experience of our
Site will be limited and many integral aspects of the Site, including
(but not limited to) adding items to your shopping bag and accessing
your account, will not work at all.

To change your cookie
settings, or if you want to be notified each time a cookie is about
to be used, you should amend the settings provided in your web
browser to prevent us from storing cookies on your computer hard
drive.

For information on how to disable cookies, please
consult the "Help" tab of your browser via the menu bar.
For further information on non-essential cookies used for targeting
and banner advertising please see below.